The AI Control Plane for Regulated Industries
AI only sees what your policies allow.
Hearth & Alloy builds the control plane that ensures AI systems only receive data your organization has classified, policy-checked, and authorized. Patent-pending Three-Gate architecture, with an immutable audit trail behind every request.
Free PHI AI Readiness Assessment. Three modules, about 30 minutes per employee. Anonymous organizational scorecard. No credit card.
Platform
The Three-Gate Architecture
Most AI safety tools monitor what the AI does after the fact. We stop unauthorized data from reaching the AI in the first place. Every request passes through three sequential checks: what the data is, who is allowed to use it, and where it can safely go. Patent-pending.
Data Reality
Multi-signal detection identifies what the data actually is: HIPAA identifiers, healthcare codes, and domain-extensible markers for other regulated industries. Works on prompts, transcripts, and files.
“Can this data even be touched by AI?”
Purpose & Authority
Policy evaluates user role, task context, and data classification together, before any model invocation. Sensitive values are transformed while meaning is preserved, and an independent verification layer confirms the request is safe.
“Is this user allowed to do this, right now?”
Risk-Based Routing
A composite risk score determines which approved model or provider a request is eligible for, or blocks it entirely. Organization-scoped allowlists and health-aware routing underneath, an immutable record above.
“Where, if anywhere, is this safe to send?”
Front Door
Start with the free PHI AI Readiness Assessment
A three-module diagnostic, about 30 minutes per employee, that produces an anonymized organizational readiness report your CISO can actually use. Baseline-locked scoring, no retake inflation. Individual scores are never shared. Report unlocks once five employees complete.
What it measures
First Product
Guardian Health: a production-ready AI Control Plane
Healthcare is our anchor industry. The platform is production-grade and running today.
Can you help me draft an email to [REDACTED] about their recent appointment? Their callback number is [REDACTED].
I've prepared a professional follow-up email template:
What's shipped:
Keith Williams
Founder
17+ years building secure data systems
Founder's Perspective
Start with the team, not the tool.
AI adoption in regulated industries fails at the people layer long before it fails at the platform layer. Most organizations don't actually know what their teams would do with a ChatGPT tab open and a patient chart on the other screen.
That's why the front door to Guardian Health is a free readiness assessment, not a sales pitch. Admins see an anonymized organizational scorecard (where the gaps are, which modules close them) and only then decide whether the platform underneath is worth a conversation.
The platform itself is the patent-pending Three-Gate control plane: sensitive data never reaches AI systems without being classified, policy-checked, and safely routed, with an immutable audit trail behind every request.
“Measure the team first. Earn the platform conversation second.”Connect with the Founder →
About
Built for industries where “we'll figure it out” is not an answer
Hearth & Alloy, Inc. builds AI control-plane infrastructure for healthcare, government, legal, and finance. Patent-pending architecture; filings under preparation.
HIPAA-aligned • SOC 2 Type II in progress • Flexible deployment: run in our environment or yours
Get in Touch
Three ways to start
Take the assessment
Free. Three modules, about 30 minutes per employee. Anonymous organizational scorecard unlocks at 5 completions.
Start Assessment